MEC Security Platform API Parsing for 5G Threat Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mobile network environments face challenges in implementing dynamic and endpoint-specific security policies, particularly in multi-access edge computing (MEC) networks, where traditional security measures are inadequate for real-time threat detection and response due to operational complexity and infrastructure limitations.
Innovation Solution
Implementing a security platform that monitors and parses MEC services APIs and NEF northbound APIs to extract mobile network identifiers and apply granular security policies, enabling threat identification, application control, and URL filtering across 5G networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security measures are implemented in MEC networks, then basic network protection is provided, but real-time threat detection and response capability is insufficient due to operational complexity and infrastructure limitations
Solution Approach 1:
The patent introduces a security platform as an intermediary component that sits between the network traffic and MEC services. This platform parses API messages, extracts mobile network identifiers, and applies security policies without requiring complex changes to existing MEC infrastructure. The intermediary handles the complexity of real-time threat detection and response, while presenting a simplified interface to the rest of the system.
Solution Approach 2:
The security platform performs multiple functions including monitoring network traffic, identifying API messages, extracting mobile network identifiers, determining security policies, and enforcing those policies. By consolidating these diverse security functions into a single multi-functional platform, the system achieves comprehensive real-time threat detection and response without proportionally increasing operational complexity.
2Measurement precision
If granular security policies are applied based on mobile network identifiers, then threat detection precision is improved, but the complexity of policy management increases
Solution Approach 1:
The patent segments the security policy management into distinct modular components: API message parsing, mobile network identifier extraction, security policy determination, and policy enforcement. Each component handles a specific aspect of the security process, allowing granular security policies to be applied precisely while managing complexity through clear separation of concerns and standardized interfaces between components.
3Loss of time
If real-time monitoring of API messages is implemented, then threat response time is reduced, but the processing load and system resource consumption increase
Solution Approach 1:
The security platform extracts only the essential mobile network identifiers from API messages rather than analyzing the entire message content. This selective extraction approach enables real-time threat detection by focusing computational resources on identifying critical security-relevant information while minimizing overall processing load and resource consumption.
Data Source
AI summary
Techniques for providing multi-access edge computing (MEC) services security in mobile networks (e.g., service provider networks for mobile subscribers, such as for 5G networks) by parsing Application Programming Interfaces (APIs) are disclosed. In some embodiments, a system/process/computer program product for MEC services security in mobile networks by parsing APIs in accordance with some embodiments includes monitoring network traffic on a mobile network at a security platform to identify an API message associated with a new session, wherein the mobile network includes a 5G network or a converged 5G network that includes a multi-access edge computing (MEC) service; extracting mobile network identifier information from the API message at the security platform; and determining a security policy to apply at the security platform to the new session based on the mobile network identifier information.